PLUGIN SECURITY
Is Super Socializer safe?
Integrate your WordPress plugins with your business applications and automate workflows between them. A single platform for all your integrations.
What this plugin does
- Slug:
super-socializer - Author: Zoho Flow
- 5000+ active installs
- 100/100 rating (14 reviews on wordpress.org)
- 122578 all-time downloads
- On WordPress.org since 2020-08-31
automationintegrationnotificationwebhookworkflow
Maintenance status
- Latest known version: 2.26
- Last updated: 2026-10-31 11:35am GMT
- Tested up to WordPress: 7.1.4
- Requires PHP: 7.0.0+
Known vulnerabilities
11 known CVEs on file for Super Socializer. Reported between 2018 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-65542 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] <= 7.14.5 (unfixed + closed) | Authentication Bypass Using an Alternate Path or Channel | High 8.8 | < 7.14.5 | 7.14.5 | 2026-07-28 | ⚠ update needed |
| CVE-2026-65544 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] <= 7.14.5 (unfixed + closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 7.14.5 | 7.14.5 | 2026-07-07 | ⚠ update needed |
| CVE-2024-13230 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.14.1 (closed) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Medium 5.3 | < 7.14.1 | 7.14.1 | 2025-01-20 | ⚠ update needed |
| CVE-2026-11798 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] <= 7.14.5 (unfixed + closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 7.14.5 | 7.14.5 | 2025-01-20 | ⚠ update needed |
| CVE-2024-9946 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.14 (closed) | Improper Authentication | High 8.1 | < 7.14 | 7.14 | 2024-11-05 | ⚠ update needed |
| CVE-2024-2836 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.64 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 7.13.64 | 7.13.64 | 2024-03-25 | ⚠ update needed |
| CVE-2023-41802 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.55 (closed) | Missing Authorization | Medium 4.3 | < 7.13.55 | 7.13.55 | 2023-09-05 | ⚠ update needed |
| — | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.54 (closed) | — | Unknown | < 7.13.54 | 7.13.54 | 2023-07-12 | ⚠ update needed |
+ 10 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| — | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.54 (closed) | — | Unknown | < 7.13.54 | 7.13.54 | 2023-07-11 | ⚠ update needed |
| CVE-2023-35882 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.53 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 7.13.53 | 7.13.53 | 2023-06-19 | ⚠ update needed |
| CVE-2023-2779 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.52 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 7.13.52 | 7.13.52 | 2023-05-29 | ⚠ update needed |
| CVE-2022-4484 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.44 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 7.13.44 | 7.13.44 | 2022-12-23 | ⚠ update needed |
| CVE-2021-24987 | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.30 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 7.13.30 | 7.13.30 | 2022-03-15 | ⚠ update needed |
| — | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.12.38 (closed) | — | Unknown | < 7.12.38 | 7.12.38 | 2020-02-14 | ⚠ update needed |
| — | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.11 (closed) | — | Unknown | < 7.11 | 7.11 | 2018-03-15 | ⚠ update needed |
| — | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.11 (closed) | — | Unknown | < 7.11 | 7.11 | 2018-03-03 | ⚠ update needed |
| — | Social Share, Social Login and Social Comments Plugin – Super Socializer [super-socializer] < 7.13.30 (closed) | — | Unknown | < 7.13.30 | 7.13.30 | — | ⚠ update needed |
| — | Super Socializer < 7.11 - Authentication Bypass | — | Unknown | < 7.11 | 7.11 | — | ⚠ update needed |
How to fix it
Keep Super Socializer updated — 2.26 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- OttoKit: All-in-One Automation Platform — 90000+ active installs — 98/100 (125)
- Zapier for WordPress — 50000+ active installs — 44/100 (72) — max PHP 8.4
- Uncanny Automator – MCP Server + Automation MCP for Claude & ChatGPT — 40000+ active installs — 98/100 (157)
- MailerLite – WooCommerce integration — 30000+ active installs — 56/100 (64) — max PHP 8.4
- CF7 to Webhook — 30000+ active installs — 100/100 (53) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.